SIEM Engineer

Neurealm; Pune District; On-site; INR 1,000,000 - 1,600,000; Full time

Job summary

Neurealm is seeking a SIEM Engineer with 3–6 years of experience to enhance threat detection and response capabilities. The role focuses on security monitoring, log analysis, and SIEM rule development to improve detection and reduce false positives.

You will work with SOC and security teams, developing detection rules, creating automation scripts in Python, and crafting Regex patterns for effective log parsing.

Qualifications

• 3–6 years of experience in SIEM engineering or security monitoring.
• Strong skills in Python scripting and Regular Expressions (Regex).
• Experience with log analysis, rule development and threat detection.

Responsibilities

• Develop and maintain SIEM detection rules, alerts, and correlation logic.
• Analyze security logs and events from multiple systems and applications.
• Build automation scripts using Python for log processing, parsing, and analysis.
• Create and optimize Regex patterns for log parsing and data extraction.
• Integrate log sources with SIEM platforms.
• Investigate security incidents and alerts generated by the SIEM system.
• Improve detection coverage and reduce false positives.
• Work closely with SOC and security teams to improve threat detection.

Skills

Python

Regex

Tools

SIEM platforms

Job description

We are looking for a SIEM Engineer with 3–6 years of experience who has strong skills in Python scripting and Regular Expressions (Regex). The ideal candidate will work on security monitoring, log analysis, and SIEM rule development to enhance threat detection and response capabilities.

Key Responsibilities:

• Develop and maintain SIEM detection rules, alerts, and correlation logic.
• Analyze security logs and events from multiple systems and applications.
• Build automation scripts using Python for log processing, parsing, and analysis.
• Create and optimize Regex patterns for log parsing and data extraction.
• Integrate log sources with SIEM platforms.
• Investigate security incidents and alerts generated by the SIEM system.
• Improve detection coverage and reduce false positives.
• Work closely with SOC and security teams to improve threat detection.